Lucene search
HistoryOct 16, 2015 - 8:59 p.m.
CVE-2015-1810
4.6 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
HIGH
Authentication
SINGLE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:H/Au:S/C:P/I:P/A:P
0.003 Low
EPSS
Percentile
66.3%
The HudsonPrivateSecurityRealm class in Jenkins before 1.600 and LTS before 1.596.1 does not restrict access to reserved names when using the “Jenkins’ own user database” setting, which allows remote attackers to gain privileges by creating a reserved name.
Affected configurations
Node
jenkinsjenkinsRange≤1.580.3lts
Node
redhatopenshiftRange≤3.1enterprise
Node
jenkinsjenkinsRange≤1.599
Related
veracode
veracode
Privilege Escalation
2019-05-02 05:18:34
Man-In-The-Middle (MitM)
2019-05-02 05:21:35
Path Traversal
2019-05-02 05:21:26
cve
cve
CVE-2015-1810
2015-10-16 20:59:08
prion
prion
Authentication flaw
2015-10-16 20:59:00
cvelist
cvelist
CVE-2015-1810
2015-10-16 20:00:00
ubuntucve
ubuntucve
CVE-2015-1810
2015-10-16 00:00:00
fedora
fedora
[SECURITY] Fedora 21 Update: jenkins-1.590-3.fc21
2015-04-18 09:44:18
[SECURITY] Fedora 22 Update: jffi-1.2.7-5.fc22
2015-04-21 19:09:03
[SECURITY] Fedora 22 Update: jenkins-executable-war-1.29-4.fc22
2015-04-21 19:09:03
openvas
openvas
Fedora Update for jenkins FEDORA-2015-5430
2015-07-07 00:00:00
Fedora Update for jenkins FEDORA-2015-5466
2015-04-19 00:00:00
Fedora Update for jffi FEDORA-2015-5430
2015-07-07 00:00:00
redhat
redhat
f5
f5
K17455 : Multiple Jenkins vulnerabilities
2015-10-16 00:00:00
SOL17455 - Multiple Jenkins vulnerabilities
2015-10-16 00:00:00
nessus
nessus
Fedora 21 : jenkins-1.590-3.fc21 (2015-5466)
2015-04-20 00:00:00
Fedora 22 : jenkins-1.606-1.fc22 / jenkins-executable-war-1.29-4.fc22 / jffi-1.2.7-5.fc22 (2015-5430)
2015-04-22 00:00:00
RHEL 6 : Red Hat OpenShift Enterprise 2.2.7 (RHSA-2015:1844)
2018-12-04 00:00:00
4.6 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
HIGH
Authentication
SINGLE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:H/Au:S/C:P/I:P/A:P
0.003 Low
EPSS
Percentile
66.3%
Related for NVD:CVE-2015-1810